TLDR Index
Daily Editions
Contents
  1. Page 1: Today’s IndexTLDR, TLDR AI, TLDR Dev, TLDR InfoSec, TLDR Crypto · 9 stories
  2. Page 2: TLDRTLDR · 8 stories
  3. Page 3: TLDR AITLDR AI · 8 stories
  4. Page 4: TLDR AI — continuedTLDR AI · 8 stories
  5. Page 5: TLDR DevTLDR Dev · 9 stories
  6. Page 6: TLDR InfoSecTLDR InfoSec · 11 stories
  7. Page 7: TLDR CryptoTLDR Crypto · 11 stories
  8. Page 8: TLDR DesignTLDR Design · 11 stories
  9. Page 9: TLDR FoundersTLDR Founders · 13 stories
  10. Page 10: TLDR MarketingTLDR Marketing · 11 stories
  11. Page 11: Resources & ToolsTLDR, TLDR Dev, TLDR InfoSec, TLDR Design, TLDR Founders · 10 stories
  12. Page 12: SponsoredTLDR, TLDR AI, TLDR Dev, TLDR InfoSec, TLDR Founders, TLDR Marketing · 13 stories
?
Keyboard shortcuts
← / →
Previous / next page
↑ / ↓
Scroll while full screen
PgUp / PgDn
Scroll by viewport
Space
Scroll down by viewport
Shift+Space
Scroll up by viewport
Home
First page
End
Last page
F
Full screen
Escape
Exit immersive mode

Daily Edition · Page 6

THE DAILY INDEX

Technology, AI, software, security, crypto and business

ATTACKS & VULNERABILITIES

TLDR InfoSec

TLDR InfoSec

DELINEA PROTOCOL HANDLER - RETURN OF THE MSI: RCE VIA CUSTOM LAUNCHER

AmberWolf disclosed an RCE vulnerability in Delinea's Secret Server Protocol Handler (≤6.0.3.39) and Connection Manager (≤2.7.1) where improper sanitisation of the sslauncher:// URL handler's generic process launcher allowed a malicious server to supply attacker-controlled process names and arguments via encrypted launcher data, achieving arbitrary code execution on both Windows and macOS when a victim visits a crafted webpage and accepts a security prompt. The exploit, implementable as a NachoVPN plugin, abuses the legitimate key exchange flow to inject serialized launcher configurations that RDPWin.exe blindly executes via Process.Start(). Delinea patched the protocol handler as of January 17. Organizations should upgrade immediately and monitor for anomalous child processes spawned by RDPWin.exe.

links.tldrnewsletter.com · 8 min

TLDR InfoSec

TWITCH SHIPS SERVER-SIDE EPPO KEYS IN ITS IOS APP, EXPOSING ITS ENTIRE PRODUCT ROADMAP

Twitch's iOS app uses server-side Eppo SDK keys instead of client tokens, exposing over 260 unobfuscated production feature flags via a CDN endpoint that can be freely polled once a key is observed in traffic. The flags reveal Twitch's near-term roadmap. Hardcoded IDs, internal codenames, and future launches like “Elevate Prime 2026” are visible, turning feature flags into a live intelligence feed on product, security posture, and internal economics.

buchodi.com · 10 min

TLDR InfoSec

PROCESS PRELUDING: CHILD PROCESS INJECTION BEFORE THE STORY BEGINS

Many security products in Windows 10 and 11 use kernel Event Tracing for Windows (ETW) hooks to monitor process creation and be notified of potentially malicious activity. An attacker can bypass these checks by exploiting a race condition between the kernel's completion of the executive process object setup and the invocation of process-creation callbacks. Attackers can also use legacy APIs for process creation, which do not trigger process-creation callbacks.

originhq.com · 7 min

TLDR InfoSec

WHAT IS EC2 INSTANCE ATTESTATION

Nitro enclaves were introduced in 2020 to provide a trusted execution environment for security-sensitive applications. However, application development was more complex due to the execution environment's limitations. Last year, AWS launched EC2 instance attestation, which extends the security enclave to the full instance, enabling more use cases and improving usability at the cost of greater effort to secure the instance and increased deployment complexity. This post walks through the process of creating an application running on an EC2 instance with attestation, including a GitHub Actions workflow to build a hardened, attestable AMI.

links.tldrnewsletter.com · 5 min

TLDR InfoSec

DEMYSTIFYING ZERO TRUST

This part of the UK's NCSC multi-part guide on implementing zero trust in an enterprise focuses on defining zero trust beyond the buzzword or a specific product. Zero trust defines a strategic shift where users are continually authenticated as opposed to a point-in-time authentication at the beginning of a session. It implies a defense in depth approach where controls are layered in a system and may work in conjunction with existing systems or replace them.

ncsc.gov.uk · 5 min

TLDR IndexPage 6